
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft
File: JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft (raw, json)
Hash identifier: QKX/tIW6n8hoB+Rm40y8h1hDR0TIjw7Eg+0TZi6Na7M=
Subject key identifier: E2:63:6C:9D:45:CC:8A:04:A3:EF:77:51:C3:ED:05:8F:FD:02:48:12
Authority key identifier: 24:3F:2D:44:72:7F:1D:1B:80:79:F4:01:4F:69:F4:A0:74:D1:F1:EA
Certificate issuer: /CN=A91AC73E/serialNumber=243F2D44727F1D1B8079F4014F69F4A074D1F1EA
Certificate serial: 054E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft
Manifest number: 0546
Signing time: Sun 01 Mar 2026 00:02:21 +0000
Manifest this update: Sun 01 Mar 2026 00:02:21 +0000
Manifest next update: Sun 08 Mar 2026 00:02:21 +0000
Files and hashes: 1: JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl (hash: x6wdxQGKXcwfUFA0ft7J5mCs6YkOGyDfcDV55H1Ijmk=)
2: 020CA7B24E4C11EC8045E71EC4F9AE02.roa (hash: lEj2Xm0LQ+xioePgGHWRdpuXrIhiuAdZJ8cF1TzyFTU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl
rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1358 (0x54e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC73E, serialNumber=243F2D44727F1D1B8079F4014F69F4A074D1F1EA
Validity
Not Before: Mar 1 00:02:21 2026 GMT
Not After : Mar 8 00:02:21 2026 GMT
Subject: CN=69a3820d-2608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4b:6a:9a:64:7e:09:15:8a:46:9a:93:7f:f8:
70:8e:e8:9c:62:af:ed:82:b0:b7:73:07:86:29:c7:
e1:e3:96:42:57:e1:4d:93:ab:4d:5e:cd:cc:9b:18:
b8:ee:14:37:61:99:25:ce:7b:6f:9d:16:7c:14:4a:
27:65:d0:44:b4:33:92:4c:82:6d:19:b7:b8:36:50:
3e:c7:60:df:5b:60:9f:59:b6:2f:fd:31:17:bd:83:
76:bd:95:b3:50:40:fe:f2:09:1e:46:8a:ff:22:37:
0b:eb:b9:16:7d:24:bf:dd:fe:e3:c2:96:39:43:be:
50:8a:a5:63:a6:6b:e5:d0:c6:c0:7e:59:56:87:36:
eb:06:a4:0c:0e:84:3d:ce:2d:f6:21:53:1c:a4:44:
45:f6:4f:0a:73:2a:35:89:9b:88:6d:5d:10:ed:30:
12:4e:c5:ab:d9:2c:85:93:33:b2:b9:b0:66:6c:01:
af:68:35:1f:a5:df:e6:6d:89:1b:0f:ff:70:67:3c:
06:4f:50:1f:09:e2:0c:93:14:4f:46:fe:08:48:cd:
89:ea:75:17:17:91:1f:f7:ce:1e:0e:ac:23:1a:8f:
95:3e:79:a6:3b:c9:22:05:5f:41:3e:0b:5e:79:04:
24:2e:bd:c5:1d:43:5d:b1:f9:d6:0c:59:f6:fd:4a:
8f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:63:6C:9D:45:CC:8A:04:A3:EF:77:51:C3:ED:05:8F:FD:02:48:12
X509v3 Authority Key Identifier:
keyid:24:3F:2D:44:72:7F:1D:1B:80:79:F4:01:4F:69:F4:A0:74:D1:F1:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4a:ce:d4:95:15:82:23:6a:7d:71:56:07:d7:08:b2:75:0b:
e0:50:3a:81:bf:2c:07:ee:d1:4e:03:70:4a:07:39:ff:b1:82:
b4:68:71:ba:a2:1a:43:e3:1b:a1:4d:a5:cd:96:58:d5:03:cf:
25:09:29:3d:85:de:1d:5f:09:9b:e4:89:99:14:06:6c:ba:19:
49:75:93:94:ad:bf:35:79:99:62:54:34:43:cd:74:9a:79:b9:
f0:33:9e:95:20:e9:39:68:8b:ed:8d:56:34:9f:c9:ee:58:df:
e7:c4:bc:a1:3e:8f:b0:29:e9:f8:7f:48:31:40:4c:ac:a8:cd:
42:61:16:65:b9:0b:32:f7:41:03:c0:9f:2a:76:4a:45:df:0f:
d5:8b:19:c3:46:86:17:75:46:4b:95:d9:b0:60:65:fd:ff:41:
13:de:2f:19:8a:9e:10:32:49:99:8f:7a:a0:b6:e0:69:77:9a:
9b:3a:e2:64:23:01:f4:ed:a9:9e:ef:c8:0e:cd:a9:eb:05:1a:
6d:d4:97:d0:70:67:a5:a5:3d:55:88:e3:13:73:54:17:b3:45:
4c:fa:30:95:f3:7d:ff:3c:fb:8d:78:8c:ab:ec:13:e6:e8:e7:
4b:74:b2:e6:ce:08:8b:11:24:b9:bd:6f:3f:5b:c0:fe:c7:e0:
40:fe:8f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:56:06 2026 by rpki-client